DE | EN
News November 12, 2026

Citrix fixes 28 NetScaler flaws; one affects all setups

If you operate Citrix NetScaler ADC or Gateway, you should review the new security bulletins and plan the recommended upgrade. One flaw, CVE-2026-120868, affects every deployment, including default configurations.

Citrix fixes 28 NetScaler flaws; one affects all setups

Key points

  • Cloud Software Group addressed 28 memory-related flaws in NetScaler ADC and NetScaler Gateway.
  • CVE-2026-120868 can cause unpredictable behavior and denial of service in every deployment.
  • No exploitation or confirmed public proof-of-concept has been reported.

Context

The bulletins were published on 12 November 2026 and cover customer-managed NetScaler appliances. The vendor reports no known exploitation, but the broad impact of CVE-2026-120868 makes the available fixed releases relevant to organizations operating these systems.

What this means for you

Directly applicable

Teams operating NetScaler can immediately check their appliance inventory, determine exposure and organize the move to a fixed release.

Who benefits: Developers and technical decision-makers who maintain NetScaler-based enterprise or legacy environments gain a concrete basis for prioritizing and coordinating the upgrade.

Share article:

Does a report affect your system?

Send the link to the report and two sentences about your system. You get an assessment of whether action is needed and what the fix looks like.

Get an assessment